Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
File: 1eglbE9iHYxMFwZl6HjqiOy7P1E.mft (raw, json)
Hash identifier: zHiekZEp0LaidplXSTQWJbnA2qLa9TnjxhskYNS/eo8=
Subject key identifier: 89:D2:CD:5C:F7:B8:99:34:B1:13:11:74:C2:AA:6A:24:8C:2E:9A:E3
Authority key identifier: D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51
Certificate issuer: /CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51
Certificate serial: 019D39AFA5D82B2F1A6F368278D17F35FAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 13:01:45 +0000
Manifest this update: Sun 29 Mar 2026 13:01:45 +0000
Manifest next update: Mon 30 Mar 2026 13:01:45 +0000
Files and hashes: 1: 1eglbE9iHYxMFwZl6HjqiOy7P1E.crl (hash: pJmi/WT5EN5zE4qvzDw4a0xKz/L1/6E9KrP/qL19nYA=)
2: X2pe7oZC92-YhI0Wjlbt7Or5j3U.roa (hash: FFDTmh8Q3nrNL2M4JqNRzlrW4SSQct1GaW84BBkxSQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:a5:d8:2b:2f:1a:6f:36:82:78:d1:7f:35:fa:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51
Validity
Not Before: Mar 29 13:01:45 2026 GMT
Not After : Mar 30 13:01:45 2026 GMT
Subject: CN=89d2cd5cf7b89934b1131174c2aa6a248c2e9ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:39:43:fb:87:d4:37:71:84:ee:11:71:ae:
79:37:18:9b:b7:d2:d0:8f:d4:f2:3c:4b:e5:a4:da:
d2:7c:9e:0f:a4:b0:e8:3d:14:2d:a9:97:59:c3:24:
fe:55:76:b4:c4:dc:56:9a:0f:1b:7a:e0:8d:b9:13:
41:ba:74:d5:83:92:46:f9:48:8f:bf:72:98:a9:c0:
63:a2:19:e9:f3:7c:37:50:30:78:c1:58:66:29:fa:
4c:0d:3b:22:fd:7f:b4:2a:0a:1b:ec:1f:5d:71:86:
08:9f:a5:cb:4f:05:c0:ec:25:00:56:d6:1d:a7:71:
0b:e6:2b:e6:2e:ab:39:a7:dc:bb:3c:42:12:74:d2:
2f:42:f9:ec:23:94:0c:4c:87:b3:7a:da:c6:af:46:
2f:dd:8c:ac:bc:2b:71:5f:65:57:63:7e:f6:88:b0:
c4:47:21:b9:d0:59:d8:4f:19:28:0e:f2:f4:6b:a1:
c9:41:c2:42:e6:1a:e0:3b:c7:41:fd:02:7f:70:0d:
78:e6:6b:7f:73:32:b3:33:3a:45:56:2c:06:0a:92:
3b:a5:84:55:40:a0:f8:1f:33:10:55:27:37:40:2e:
fc:b0:94:5e:17:cb:bc:94:d9:71:f0:d6:2d:dc:b5:
d1:dd:71:8d:ab:37:c3:5b:b0:43:65:f7:52:d2:67:
2c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D2:CD:5C:F7:B8:99:34:B1:13:11:74:C2:AA:6A:24:8C:2E:9A:E3
X509v3 Authority Key Identifier:
keyid:D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:43:9e:cd:14:b6:ff:a3:c1:a3:36:f2:37:28:ac:8f:21:ab:
b0:f9:eb:56:4f:82:ef:a2:e7:c1:f8:95:b1:21:cc:4c:67:77:
09:c4:65:ff:aa:20:ab:55:69:1f:ad:fa:f0:bb:d3:fb:a6:6e:
ff:17:c8:4d:40:45:c8:95:89:67:00:9d:f8:aa:1d:23:f6:2d:
ea:c1:17:e0:5f:f7:26:65:f5:da:f5:c9:61:1c:c6:75:68:2a:
21:c0:b5:10:15:a1:f0:b5:7c:45:0e:f7:97:82:8c:e6:ca:8a:
ca:2e:61:bb:75:09:38:e1:e4:96:b6:c8:0f:54:51:ea:2e:d5:
d7:69:d6:a1:97:37:27:7f:cb:61:97:4b:2c:f6:be:c5:65:36:
f8:b5:e8:e4:6e:63:71:60:34:10:f4:e4:9e:43:9b:67:f3:92:
3d:36:72:68:cf:0b:82:d9:ca:4b:fd:d8:ca:f6:9c:03:38:4a:
45:f9:11:7f:c4:99:3e:48:27:76:59:db:4b:ab:5a:71:a4:8b:
46:fb:1b:fc:16:11:ef:5b:f8:eb:84:b8:68:6f:29:eb:ae:e5:
0a:59:b6:44:0e:a5:b9:6c:7b:75:3a:97:0d:0b:7e:40:1f:55:
57:2f:e7:5d:80:4f:a1:f4:8d:f6:c0:55:dc:97:98:f3:3b:a1:
d2:7c:8f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:33 2026 by rpki-client